logo
DATABASE RESOURCES PRICING ABOUT US

Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry

Description

## Summary Multiple vulnerabilities have been identified in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util. coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util shipped with IBM SmartCloud Entry Appliance. IBM SmartCloud Entry Appliance has addressed the vulnerabilities. ## Vulnerability Details **CVEID:** [_CVE-2017-2616_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-2616>)** DESCRIPTION:** util-linux could allow a local authenticated attacker to bypass security restrictions, caused by a race condition when handling the management of child processes. An attacker could exploit this vulnerability to kill other processes with root privileges. CVSS Base Score: 7.8 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/124680_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/124680>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) **CVEID:** [_CVE-2016-0634_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-0634>)** DESCRIPTION:** GNU Bash could allow a local attacker to execute arbitrary code on the system, caused by an error related to the expansion of the $HOSTNAME. By injecting the hostname with malicious code, an attacker could exploit this vulnerability to execute arbitrary code on the system. CVSS Base Score: 4.9 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121373_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121373>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L) **CVEID:** [_CVE-2016-7543_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-7543>)** DESCRIPTION:** GNU Bash could allow a local attacker to execute arbitrary commands on the system. An attacker could exploit this vulnerability using specially crafted SHELLOPTS and PS4 variables to execute arbitrary commands on the system with root privileges. CVSS Base Score: 8.4 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/121372_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/121372>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) **CVEID:** [_CVE-2016-9401_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9401>)** DESCRIPTION:** GNU Bash could allow a local attacker to bypass security restrictions, caused by a use-after-free error. An attacker could exploit this vulnerability using a specially crafted address to bypass the restricted shell. CVSS Base Score: 4 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122314_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122314>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N) **CVEID:** [_CVE-2017-3136_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3136>)** DESCRIPTION:** ISC BIND is vulnerable to a denial of service, caused by the improper handling of query requests when using DNS64 with "break-dnssec yes" option. By sending a specially crafted DNS request, a remote attacker could exploit this vulnerability to make named exit unexpectedly with an assertion failure. CVSS Base Score: 5.9 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/124516_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/124516>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2017-3137_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3137>)** DESCRIPTION:** ISC BIND is vulnerable to a denial of service, caused by the improper handling of a query response containing CNAME or DNAME resource records in an unusual order. By sending a specially crafted DNS response, a remote attacker could exploit this vulnerability to make named exit unexpectedly with an assertion failure. CVSS Base Score: 7.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/124517_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/124517>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2017-3139_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-3139>)** DESCRIPTION:** BIND on Red Hat Enterprise Linux is vulnerable to a denial of service, caused by a DNSSEC validation flaw. By sending a specially-crafted DNS response, a remote attacker could exploit this vulnerability to cause the system to crash. CVSS Base Score: 7.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125766_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125766>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2017-5461_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5461>)** DESCRIPTION:** Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by an out-ouf-bounds write during Base64 decoding operation in the Network Security Services (NSS) library. By persuading a victim to visit a specially-crafted Web site, a remote attacker could exploit this vulnerability using unknown attack vectors to execute arbitrary code on the vulnerable system or cause a denial of service. CVSS Base Score: 8.8 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125002_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125002>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) **CVEID:** [_CVE-2015-5203_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5203>)** DESCRIPTION:** JasPer JPEG-2000 library could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error within jasper_image_stop_load() function. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service. CVSS Base Score: 3.7 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/105839_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/105839>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2015-5221_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5221>)** DESCRIPTION:** JasPer JPEG-2000 library could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free error within src/libjasper/mif/mif_cod.c. An attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service. CVSS Base Score: 3.7 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/105837_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/105837>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-10248_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10248>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a flaw in the jpc_tsfb_synthesize function in jpc_tsfb.c. By using a specially-crafted vector involving an empty sequence, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 7.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123332_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123332>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-10249_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10249>)** DESCRIPTION:** JasPer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by jpc_dec_tiledecode function in jpc_dec.c. By using a specially-crafted image file, a remote attacker could overflow a buffer and execute arbitrary code on the system. CVSS Base Score: 7.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123333_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123333>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) **CVEID:** [_CVE-2016-10251_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-10251>)** DESCRIPTION:** JasPer is vulnerable to an integer overflow, caused by and error in the jpc_pi_nextcprl function in jpc_t2cod.c. By using a specially-crafted file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system. CVSS Base Score: 6.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123337_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123337>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) **CVEID:** [_CVE-2016-1577_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1577>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a double free vulnerability in jas_iccattrval_destroy function within jas_icc.c. By persuading a victim to open a specially crafted ICC color profile in a JPEG 2000 image file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/111241_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/111241>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-1867_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-1867>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jpc_pi_nextcprl function. By persuading a victim to open a specially crafted JPEG 2000 image file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/110112_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/110112>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-2089_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2089>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jas_matrix_clip function. By persuading a victim to open a specially crafted JPEG 2000 image file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/110580_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/110580>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-2116_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-2116>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a double free vulnerability in jas_iccprof_createfrombuf function. By using a malformed JPEG 2000 image file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/111243_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/111243>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-8654_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8654>)** DESCRIPTION:** JasPer is vulnerable to a heap-based buffer overflow, caused by improper bounds checking by the QMFB code in JPC codec. By persuading a victim to open a specially-crafted image file, a remote attacker could overflow a buffer and execute arbitrary code on the system or cause the application to crash. CVSS Base Score: 7.8 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125875_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125875>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) **CVEID:** [_CVE-2016-8690_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8690>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by NULL pointer dereference error in the bmp_getdata function in libjasper/bmp/bmp_dec.c. By persuading a victim to open a specially-crafted BMP image in an imginfo command, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122107_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122107>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-8691_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8691>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a divide-by-zero error in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c. By persuading a victim to open a specially-crafted XRsiz value in a BMP image to the imginfo command, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122108_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122108>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-8692_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8692>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a divide-by-zero error in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c. By persuading a victim to open a specially-crafted YRsiz value in a BMP image to the imginfo command, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122109_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122109>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L) **CVEID:** [_CVE-2016-8693_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8693>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by double free error in the mem_close function in jas_stream.c. By persuading a victim to open a specially-crafted BMP image to the imginfo command, an attacker could exploit this vulnerability to cause the application to crash or execute arbitrary code. CVSS Base Score: 5.4 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122110_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122110>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L) **CVEID:** [_CVE-2016-8883_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8883>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a flaw in the jpc_dec_tiledecode function in jpc_dec.c script. By using a specially-crafted file, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 7.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122232_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122232>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-8884_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8884>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a NULL pointer dereference in bmp_getdata function in libjasper/bmp/bmp_dec.c. By calling the imginfo command with a specially-crafted BMP image, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/124706_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/124706>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-8885_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-8885>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a NULL pointer dereference in bmp_getdata function in libjasper/bmp/bmp_dec.c. By calling the imginfo command with a specially-crafted BMP image, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/124708_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/124708>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9262_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9262>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by multiple integer overflows in the jas_realloc function in base/jas_malloc.c and mem_resize function in base/jas_stream.c. By persuading a victim to open a specially-crafted image file, an attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123836_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123836>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9387_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9387>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an integer overflow error in the jpc_dec_process_siz function in libjasper/jpc/jpc_dec.c. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123681_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123681>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9388_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9388>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the ras_getcmap function in ras_dec.c. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123682_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123682>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9389_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9389>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jpc_irct and jpc_iict functions in jpc_mct.c. By using unspecified vectors, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123683_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123683>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9390_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9390>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jas_seq2d_create function in jas_seq.c. By persuading a victim to open a specially-crafted image file, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123684_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123684>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9391_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9391>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jpc_bitstream_getbits function in jpc_bs.c. By using a very large integer, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123685_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123685>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9392_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9392>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the calcstepsizes function in jpc_dec.c. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123686_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123686>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9393_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9393>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jpc_pi_nextrpcl function in jpc_t2cod.c. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123687_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123687>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9394_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9394>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an error in the jas_seq2d_create function in jas_seq.c. By persuading a victim to open a specially-crafted file, an attacker could exploit this vulnerability to trigger an assertion failure. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/123688_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/123688>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9560_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9560>)** DESCRIPTION:** JasPer is vulnerable to a stack-based buffer overflow, caused by a flaw in the jpc_tsfb_getbands2 function in jpc_tsfb.c. By persuading a victim to open a specially-crafted image file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause a denial of service. CVSS Base Score: 6.3 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/122168_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/122168>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L) **CVEID:** [_CVE-2016-9583_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9583>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by an out-of-bounds heap read in the jpc_pi_nextpcrl() function. By persuading a victim to open a specially-crafted image file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 5.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125876_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125876>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2016-9591_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9591>)** DESCRIPTION:** JasPer could allow a remote attacker to execute arbitrary code on the system, caused by a use-after-free when decoding specific JPEG 2000 image files. By persuading a victim to open a specially-crafted image file, a remote attacker could exploit this vulnerability to execute arbitrary code on the system or cause the application to crash. CVSS Base Score: 7 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125877_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125877>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) **CVEID:** [_CVE-2016-9600_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9600>)** DESCRIPTION:** JasPer is vulnerable to a denial of service, caused by a NULL pointer dereference when decoding specific JPEG 2000 image files. By persuading a victim to open a specially-crafted image file, a remote attacker could exploit this vulnerability to cause the application to crash. CVSS Base Score: 4.7 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125878_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125878>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2017-8779_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-8779>)** DESCRIPTION:** rpcbind, LIBTIRPC, and NTIRPC are vulnerable to a denial of service, caused by improper validation of XDR strings in memory allocation. By sending a specially-crafted UDP packet, a remote attacker could exploit this vulnerability to cause memory consumption. CVSS Base Score: 7.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/125753_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/125753>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2017-7502_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7502>)** DESCRIPTION:** Mozilla Network Security Services (NSS), as used in Mozilla Firefox, is vulnerable to a denial of service, caused by a NULL pointer dereference in the ssl3_GatherData() function. By sending empty SSLv2 messages, a remote attacker could exploit this vulnerability to cause the service to crash. CVSS Base Score: 7.5 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/126599_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/126599>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) **CVEID:** [_CVE-2017-1000367_](<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-1000367>)** DESCRIPTION:** sudo could allow a local attacker to gain elevated privileges, caused by improper parsing in the get_process_ttyname() function for Linux. An attacker with privileges to execute commands could exploit this vulnerability to overwrite any file on the filesystem with his command's output and gain root privileges on the system. CVSS Base Score: 7.8 CVSS Temporal Score: See [_https://exchange.xforce.ibmcloud.com/vulnerabilities/126527_](<https://exchange.xforce.ibmcloud.com/vulnerabilities/126527>) for the current score CVSS Environmental Score*: Undefined CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) ## Affected Products and Versions IBM SmartCloud Entry Appliance 2.3.0 through 2.3.0.4 fix pack 10, IBM SmartCloud Entry Appliance 2.4.0 through 2.4.0.4 fix pack 10, IBM SmartCloud Entry Appliance 3.1.0 through 3.1.0.4 fix pack 25, IBM SmartCloud Entry Appliance 3.2.0 through 3.2.0.4 fix pack 25 ## Remediation/Fixes Product | VRMF| Remediation/First Fix ---|---|--- SmartCloud Entry| 2.3| IBM SmartCloud Entry Appliance 2.3.0.4 Fixpack 11: [](<https://www-945.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.2.0.4-IBM-SCE_APPL-FP24&source=SAR&function=fixId&parent=ibm/Other%20software>)[_http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=2.3.0.4-IBM-SCE_APPL-FP011&source=SAR_](<http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=2.3.0.4-IBM-SCE_APPL-FP011&source=SAR>) [](<https://www-304.ibm.com/support/docview.wss?uid=swg24029672>)[](<https://www-304.ibm.com/support/docview.wss?uid=swg24029672>)[](<http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=2.3.0.4-IBM-SCE_APPL-FP009&source=SAR>) SmartCloud Entry| 2.4| IBM SmartCloud Entry Appliance 2.4.0.4 Fixpack 11: [](<https://www-945.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=2.4.0.4-IBM-SCE_APPL-FP009&source=SAR&function=fixId&parent=ibm/Other%20software>)[](<https://www-304.ibm.com/support/docview.wss?uid=swg24029672>)[_https://www-945.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=2.4.0.4-IBM-SCE_APPL-FP011&source=SAR&function=fixId&parent=ibm/Other software_](<https://www-945.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=2.4.0.4-IBM-SCE_APPL-FP011&source=SAR&function=fixId&parent=ibm/Other%20software>) SmartCloud Entry| 3.1| IBM SmartCloud Entry Appliance 3.1.0.4 Fixpack 26: [](<http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.1.0.4-IBM-SCE_APPL-FP24&source=SAR>)[_http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.1.0.4-IBM-SCE_APPL-FP26&source=SAR_](<http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.1.0.4-IBM-SCE_APPL-FP26&source=SAR>)[](<https://www-304.ibm.com/support/docview.wss?uid=swg24029672>) SmartCloud Entry| 3.2| IBM SmartCloud Entry Appliance 3.2.0.4 Fixpack 26: [](<https://www-945.ibm.com/support/fixcentral/swg/selectFixes?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.2.0.4-IBM-SCE_APPL-FP24&source=SAR&function=fixId&parent=ibm/Other%20software>)[_http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.2.0.4-IBM-SCE_APPL-FP26&source=SAR_](<http://www.ibm.com/support/fixcentral/quickorder?product=ibm%2FOther+software%2FIBM+SmartCloud+Entry&fixids=3.2.0.4-IBM-SCE_APPL-FP26&source=SAR>)[](<https://www-304.ibm.com/support/docview.wss?uid=swg24029672>)[](<https://www-304.ibm.com/support/docview.wss?uid=swg24029672>) ## Workarounds and Mitigations None ## Get Notified about Future Security Bulletins Subscribe to [My Notifications](< http://www-01.ibm.com/software/support/einfo.html>) to be notified of important product support alerts like this. ### References [Complete CVSS v2 Guide](<http://www.first.org/cvss/v2/guide> "Link resides outside of ibm.com" ) [On-line Calculator v2](<http://nvd.nist.gov/CVSS-v2-Calculator> "Link resides outside of ibm.com" ) [Complete CVSS v3 Guide](<http://www.first.org/cvss/user-guide> "Link resides outside of ibm.com" ) [On-line Calculator v3](<http://www.first.org/cvss/calculator/3.0> "Link resides outside of ibm.com" ) Off ## Related Information [IBM Secure Engineering Web Portal](<http://www.ibm.com/security/secure-engineering/bulletins.html>) [IBM Product Security Incident Response Blog](<http://www.ibm.com/blogs/psirt>) ## Change History < 27 July 2017 >: Original version published *The CVSS Environment Score is customer environment specific and will ultimately impact the Overall CVSS Score. Customers can evaluate the impact of this vulnerability in their environments by accessing the links in the Reference section of this Security Bulletin. ## Disclaimer Review the [IBM security bulletin disclaimer and definitions](<https://www.ibm.com/support/pages/bulletin/#disclaimer>) regarding your responsibilities for assessing potential impact of security vulnerabilities to your environment. [{"Product":{"code":"SST55W","label":"IBM Cloud Manager with OpenStack"},"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Component":"Not Applicable","Platform":[{"code":"PF016","label":"Linux"}],"Version":"2.3;2.4;3.1;3.2","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]


Affected Software


CPE Name Name Version
ibm cloud manager with openstack 2.3
ibm cloud manager with openstack 2.4
ibm cloud manager with openstack 3.1
ibm cloud manager with openstack 3.2

Related